Drupal has released fixes for two critical remote-code-execution vulnerabilities, CVE-2026-108097 in the core Field UI module and CVE-2026-108099 in the contributed Entity List module, affecting all currently supported versions of the CMS. The project's security team urged administrators to update before October 14, warning that attackers could build exploits within hours or days of disclosure. Exploitation of either flaw generally requires interaction with contributed modules or custom code rather than core alone.
bleepingcomputer.com
· 2026-10-17
An antisense oligonucleotide therapy targeting the faulty CHCHD10 gene produced improved symptoms in the first ALS patient treated with it, who remained functional as a physician a year later. Separately, a study found that Chinese companies placed on the US Entity List appear to have increased their science patents and publications compared with non-sanctioned firms, though causation remains unproven.
nature.com
· 2026-09-18
A Science journal analysis of patent citations and publications found that Chinese companies placed on the US Entity List increased their reliance on scientific literature to drive innovation, compared with similar firms not sanctioned. These restricted companies filed more patents citing scientific research and published more scientific articles than their unsanctioned counterparts after being blacklisted.
nature.com
· 2026-09-18
Senators Ron Wyden and Sheldon Whitehouse, joined by Republican Rep. Pat Harrigan, sent a letter to Commerce Secretary Howard Lutnick asking that BellTroX, CyberRoot, and Sunkissed Organic Farms (formerly Appin) be added to the department's entity list. They allege these Indian firms have spent over a decade hacking Americans and using foreign courts to suppress reporting on their activities. The Commerce Department has not indicated whether it will act on the request.
techcrunch.com
· 2026-09-09
GoKawiil